General

  • Target

    ded1e210e4a4b8e5f54518763cafd88f_JaffaCakes118

  • Size

    311KB

  • Sample

    240913-yw2teswhph

  • MD5

    ded1e210e4a4b8e5f54518763cafd88f

  • SHA1

    1ba87a05234974104a14db6e6e8158dd930ff000

  • SHA256

    a61d212b1ec6e910f5867c0fa320135b52049c8e2a97a12235f017a8ef6a14bb

  • SHA512

    e4c0e3a137e9c5a2416775c9937dabe9838457f0900314636d8f6f0268600636299a3a3e5e3f55440a3d6ba551058984db277bb6911a1ddf3c309ded1e9fe0e3

  • SSDEEP

    6144:AG377xS2Vp2CeiorXhwTBN53/pcCJJvHsCIoS:rr7xS2Vp6FwTpbJJvHJIoS

Malware Config

Targets

    • Target

      ded1e210e4a4b8e5f54518763cafd88f_JaffaCakes118

    • Size

      311KB

    • MD5

      ded1e210e4a4b8e5f54518763cafd88f

    • SHA1

      1ba87a05234974104a14db6e6e8158dd930ff000

    • SHA256

      a61d212b1ec6e910f5867c0fa320135b52049c8e2a97a12235f017a8ef6a14bb

    • SHA512

      e4c0e3a137e9c5a2416775c9937dabe9838457f0900314636d8f6f0268600636299a3a3e5e3f55440a3d6ba551058984db277bb6911a1ddf3c309ded1e9fe0e3

    • SSDEEP

      6144:AG377xS2Vp2CeiorXhwTBN53/pcCJJvHsCIoS:rr7xS2Vp6FwTpbJJvHJIoS

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • UAC bypass

    • ModiLoader Second Stage

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.